ABSTRACT 

Content leaving a local network can be captured and indexed so that queries can 
be performed on the captured data. In one embodiment, the present invention comprises 
an apparatus that connects to a network. In one embodiment, this apparatus includes a 
network interface module to connect the apparatus to a network, a packet capture module 
to intercept packets being transmitted on the network, an object assembly module to 
reconstruct objects being transmitted on the network from the intercepted packets, an 
object classification module to determine the content in the reconstructed objects, and an 
object store module to store the objects. This apparatus can also have a user interface to 
enable a user to search objects stored in the object store module. 
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